#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

How do I extract key value from below Json Sample.

vreddy22
New Member

Hi All, I have a sample json event in Splunk as below.  Please help me to understand how I can parse custom_tags value from below . This may have multiple key value pairs in it

{

account:xyz,

eventdate:01/25/2024,

properties: {

            version:1.0,

             requestID: cvv,

              response: {"statusCode":"200", "result":"{\"run_id\":465253,\"custom_tags\":{\"jobname\":\"xyz\",\"domain\":\"bgg\"}}}

              time:12:55

}

}

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Use spath for json data

| spath input=properties
| spath input=response.result custom_tags
| spath input=custom_tags
0 Karma
Get Updates on the Splunk Community!

New This Month - Splunk Observability updates and improvements for faster ...

What’s New? This month, we’re delivering several enhancements across Splunk Observability Cloud for faster and ...

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...

Buttercup Games: Further Dashboarding Techniques (Part 6)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...